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(57) Abstract 

A test system (10) is. coupled to a control system (20) in a manner which allows the test system to communicate with and drive the 
control system by sending and receiving signals via both the control ler-I/0 communication channel (160) and the field I/O connectors (225). 
The test system (10) is used to both simulate a plant to be controlled and to monitor, validate, and/or modify the internal state of the control 
system controller and possibly the control system I/O interface (220). Plant simulation is accomplished by simulating the 1/0 devices to 
which the control system (20) is coupled (and hence the plant processes) when installed in the operational environment. In addition to 
the simulation of I/O devices, the test system (10) takes advantage of the fact that many commonly used controller and I/O interfaces are 
capable of communication with other devices by using such communications ability to provide instructions to or obtain information from a 
control system's controller(s) and 1/0 interface(s). 
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SIMULATOR CART 

This application claims the benefit of U.S. provisional apphcation number 60/126060 
incorporated herein by reference in its entirety. 

5 Field of The Invention 

The field of the invention is test and simulator systems. 

Background of The Invention 

Control systems incorporating PLCs (Programmable Logic Controlers) and DCSs 
(Distributed Control Systems) are frequently used to control real world processes by 

10 accepting inputs which typically originate from sensors such as, among others, those used to 
sense temperature, flow, level, radiation, light, movement, and pressure, and those used in 
generating outputs which are used to drive actuators such as hydraulic devices, valves, lights, 
and motors. Control systems can often be viewed as having a control component and an 
interface component, with one or both components having both hardware and software sub- 

15 components. Thus a PLC based device might utilize a digital PLC having embedded software 
as the control component (the "controller"), with an interface component (the "I/O interface") 
(a) accepting signals from sensors and converting them into a form acceptable to the PLC, 
and (b) accepting outputs from the PLC and converting them to signals suitable as inputs to 
the actuators. In such systems, the controller and 1/0 interface are often connected by one or 

20 more paths (the "controller-I/O commvmication channel) to allow communication and control 
signals to pass between the controller and the I/O interface. Similarly, the I/O interface is, 
after the control system is installed in its operating environment, connected via one or more 
electrical paths (the "field wiring") to the components from which the control system receives 
its inputs, and to the components to which the control system directs its outputs, with the I/O 

25 interface being provided with a plurality of connectors ("field I/O connectors") which 

facilitate connecting the I/O interface with the field wiring. Many control systems will also 
incorporate a human-machine-interface (HMI) component comprising hardware and or 
software for facilitating operator interaction with the control system. 

Although methods and devices for testing control systems are known, they generally 
30 have individual strengths and weaknesses which make them more appropriate in some 
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situations and less appropriate in other. Thus, there is a continuing need for improved 
methods and apparatus for control system testing. 

Summar>^ of the InventioD 

Methods and apparatus are provided which allow control systems to be tested. 
5 Specifically, a test system is coupled to a control system in a manner which allows the test 
system to conmiunicate with and drive the control system by sending and receiving signals 
via both the controller-I/O communication channel and the field I/O connectors. In essence, 
the test system is used to both simulate a plant to be controlled and to monitor, validate, and 
or modify the internal state of the control system controller and possibly the control system 

1 0 I/O interface. Plant simulation is accomplished by simulating the I/O devices to which the 
control system is coupled (and hence the plant processes) when installed in its operational 
environment. In addition to the simulation of I/O devices, the test system takes advantage of 
the fact that many commonly used controller and I/O interfaces are capable of communication 
with other devices by using such communications ability to provide instructions to or obtain 

1 5 information fi-om a control system's controller(s) and I/O interface(s). 

It is contemplated that the methods and apparatus disclosed herein will provide an 
effective approach to connecting a control system to be tested to simulated I/O devices and 
controlling and monitoring the simulated I/O devices so as to produce inputs to the control 
system, to record outputs fi-om the control systerii, and to compare the recorded outputs 
20 against an expected value and record the result of the comparison for reporting purposes. 

It is also contemplated that the methods and apparatus disclosed herein will provide 
an effective approach to the staging and testing of PLC/HMIs (Programmable Logic 
Controllers/Human Machine Interfaces) and DCSs (Distributed Control Systems) before 
delivery to the field. 

25 It is also contemplated that the methods and apparatus disclosed herein will provide 

an effective mechanism for validating the operation of a control system once it has been 
installed in a plant to be controlled. 

Various objects, features, aspects and advantages of the present invention will become 
more apparent fi-om the following detailed description of preferred embodiments of the 
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invention, along with the accompanying drawings in which Hke numerals represent like 
components. 

Brief Description of The Draw in2S 

Fig. 1 is a schematic view of a simulator cart embodying the invention. 

5 Fig. 2 is an alternative schematic view of the simulator cart of figure 1 . 

Fig. 3 is a schematic view of a simulator coupled to a plant control system. 

Fig. 4A is a diagram of a preferred layout for components on a first side of a cart 
based simulator. 

Fig. 4B is a diagram of a preferred layout for components on a second side of the 
10 simulatorof Fig. 4a 

Fig. 5A is a wiring diagram illustrating a preferred method of interconnection for the 
components of the simulator of Fig. 4A. 

Fig. 5B is a wiring diagram illustrating a preferred method of interconnection for the 
components of the simulator of Fig. 4B. 

15 Fig. 6 is a diagram of a preferred layout for components in a "briefcase" bzised 

- -simulator. 

Fig. 7 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to select which test section to run. 

Fig. 8 is a screen capture of a simulator HMI screen wherein an operator is being 
20 prompted to select whether to ruii a particular test or an entire test procedure: 

Fig. 9 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform a first test. 

Fig. 1 0 is a screen capture of a simulator HMI screen wherein the operator is being 
prompted to enter the results of the test of Fig. 9. 



1 
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Fig. 1 1 is a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform a second test. 

Fig. 1 2 is a diagram of a simulator HMI database table. 

Fig. 1 3 is a diagram of a simulator HMI database table. 
5 Fig. 1 4 is a diagram of a simulator HMI database table. 

Fig. 1 5 is a diagram of a simulator HMI database table. 

Fig. 1 6 is a diagram of a simulator HMI database table. 

Fig. 17 is a diagram of a simulator HMI database table. 

Fig. 1 8 is a diagram of a simulator HMI database table. 
1 0 Fig. 1 9 is a diagram of a first method embodying the invention. 

Fig. 20 is a diagram of a second method embodying the invention. 

Fig. 21 is a dija^am of a third method embodying the invention. 

Fig. 22 is a diagram of a fourth method embodying the invention. 

Fig. 23 is a diagram of a fifth method embodying the invention. 
1 5 Fig. 24 is a diagram of a sixth method embodying the invention. 

Fig. 25 is a diagram of a seventh method embodying the invention. 

Detailed Description 

Referring to figures 1 -3, a simulator cart test system ("SIMCart") 10 is coupled to a 
control system to be tested ("target CS") 20. SIMCart 1 0 includes rolling enclosure 1 10, I/O 
20 simulator modules 1 20, HMI/configurator 1 30, hardcopy device 1 40, wiring harnesses 1 50, 
and communication channel 160 connections 161 and 163. Target CS 20 includes enclosure 
210, I/O interfaces 220, field I/O connectors 225, HMI 230, communication channel 160 
connections 261 and 263, and PLC 270. SIMCart 10 uses wiring harnesses 150 to send and 
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receive I/O signals to and from I/O interfaces 220 so as to simulate the input devices/sensor 
50 and output devices/actuators 40 which would be connected via the field wiring 41 and 51 
to target CS 20 when target CS 20 is installed. SIMCart 10 uses communications channel 
160 to obtain register and status information from I/O interfaces 220, HMI 130 and PLC 270. 
5 By monitoring the internal state of and data flow between I/O interfaces 220, HMI 1 30 and ' 
PLC 270, SIMCart 10 is bistter able to isolate any problems which may occur in target CS 20 
during testing as occurring in a particular subsystem of target CS 20. The manner in which 
SIMCart 10 is coupled to target CS 20 also permits SIMCart 10 to test riiultiple I/O channels 
and or subsystems of target CS 20 simultaneously. 

10 The SIMCart is automatically initialized by utilizing communications channel 1 60 to 

query target CS 20 to obtain information which allows SIMCart 10 to perform automatic 
initialization and mapping of its input and outputs to those of target CS 20. SIMCart 10 
incorporates a knowledge base which includes characteristics of known control system 
hardware and software components in performing such automatic initialization. It is 

15 contemplated that the knowledge base might be extended to include mathematical models of 
standard components such as sensors and actuators to allow SIMCart 10 to better simulate 
such components and to allow automatic test generation for target systems which will be 
coupled to such components. Figures 12-18 show some of the fields and data which might be 
used in maintaining such a knowledge base. 

20 SIMCart 10 is contemplated as being beneficial in the development and off-site 

testing of target CS 20 by simulating the plant which target CS 20 is intended to control. If 
the capacity of a single SIMCart 10 is insufficient to simulate an entire plant, multiple 
SIMCarts 1 0 can be used to achieve the simulation. Such a combination of SIMCarts 1 0 may 
utilize multiple HMI 130 devices, or may share a single HMI 130. SIMCart 10 is also 

25 contemplated as being beneficial for off-site training of personnel in the operation of target 
CS 20 when SIMCart 10 is used in conjunction with target CS 20. Such off-site use of 
SIMCart 10 is contemplated as providing, among others, complete testing of all target CS 20 
inputs and resulting outputs before field installation 

On-site testing is also contemplated as benefiting from the use of SIMCart 10, either 
30 in its entirety or only its configurator/HMI portion. Once target CS 20 is installed in its 
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operational environment, configurator 130 can be used as a test and validation tool. The 
configurator 130 can provide step-by step instructions to a field tester which, if followed, 
resuh in a desired level of testing of target CS 20. By doing so, configurator 130 essentially 
controls the test process through the field tester. By requiring feedback from the field tester 
5 upon the completion of various portions of the testing, a test report which includes the tests 
steps performed and the tester responses can be generated so as to provide assurance that the 
required level of testing has be completed. Such "controlled" testing thus provides a method 
of repeatable, validated and verified testing. Configurator 130 can also be used to record the 
results of such testing and to generate reports in the field which provide feedback as to the 
1 0 current state of target CS 20 and the field wiring to which target CS 20 is coupled. 

If the entire SIMCart 1 0 is used on-site, SIMCart 1 0 can be interchanged with selected 
inputs and outputs of target CS 20 so as to allow "live" inputs to cause target CS 20 to 
control simulated actuator components, or to use simulated inputs to cause target CS 20 to 
control "live" actuator components, or to mix and match live and simulated inputs and 
15 outputs as desired. If configurator 130 is still attached to the rest of SIMCart 10 during 
testing, and if SIMCart 10 is coupled to target CS 20 during testing, configurator 130 can 
control the test process both through direct interaction with target CIS 20 and through a test 
operator as previously discussed. 

Rolling enclosure 1 10 of SIMCart 10 is preferred to be sized and dimensioned to 
20 house I/O simulator moduleTnO^d any necesiaryTupporting systems in a manner which 
facilitates the use of SIMCart 1 0 and its interconnection with target CS 20. 

I/O simulator modules 120 may comprise PLCs or smart I/O systems. The SIMCart 
1 0 of figure 1 utihzes several Sixnet I/O related products including ST-DI-024-16H, St-PS- . 
024-02N, ST-D0-DC2-1 6H, ST-AI-20M-1 6H, ST-AO-20M-08F, ST-DM20-08U, ST-DO- 

25 AC 1 -08U, and ST-GT-ETH-24P. Details of the preferred Sixnet products are attached to the 
provisional application as part of its disclosure, said provisional application having 
previoiusly been incorporated by reference herein. Figures 4A and 4B provide. a diagram of a 
preferred layout of components in SIMCart 10, and Figures 5 A and 5B provide corresponding 
wiring diagrams showing a preferred method for interconnecting the components of SIMCart 

30 10. 
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An alternative embodiment utilizes a smaller number of components so that a 
SIMCart type simulator can be fit within a carrying case. Figure 6 provides a diagram of a 
preferred layout of components in such an embodiment. 

HMI/configurator 130 of SIMCart 1 0 is contemplated as being a general purpose 
5 computer such as a laptop PC ("PC"). Portability is particularly desirable as it facilitates the 
transportation of HMI 130 into the field to support on-site testing of an installed target CS 
20. HMI 130 is contemplated as incorporating software which allows testing of alarm 
responses (including deadbands), loops, and logic, and reporting of HMI readouts, tirend 
graphs, alarms, reports, system requirements, etc. Test results are stored in the form of 
1 0 textual date and time stamped data, graphs, and tester responses to prompted questions. 

In a preferred embodiment, HMI 130 includes a multi-tasking operating system, 
preferably Windows NT^^, which is capable of supporting a graphical user interface ("Gl^^ 
and a relational database system (preferably Microsoft Access''>0> ^ as software for 
controlling I/O simulator modules 120, and testing target CS 20. HMI 130 is also preferred to 
1 5 include an Ethernet network interface card for connection to communication channel 1 60 

which is preferred to be an TCP/IP based Ethernet network. It is also preferred that HMI 130 
of SIMCart 10 be detachable fi-om the rest of SIMCart 10 to allow it to be used independently 
as an onsite verification tool. 

. HMI/configurator 130 provides for downloading test relational databases, initiating 
20 tests and capturing tester responses and comments, and generating reports. The test databases 
include test cases, expected results for test comparison and exception generation. An overall 
test planner database organizes the sequence of test events. Being as the test databases are 
derived from the requirements database, the system owner is assured of lock-step 
configuration control and traceable requirements testing. 

25 It is preferred that configurator 130 utilize a relational database coupled to a GUI to 

allow entry of and storage of test requirements at a high level, and to provide tools for 
deriving lower level sets of test instructions from such high level requirements in a manner 
which maintains a correlation between lower level test sets and higher level requirements. By 
maintaining such a correlation, changes to high level requirements can be quickly, and 
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sometimes automatically, incorporated into the lower level test sets. Such lower level test 
sets will be used to drive and control both automatic and interactive testing of target CS 20. 
By maintaining a correlation between high level and low level requirements, reports showing 
the test steps used to verify satisfaction of the high level requirements through performance of 
5 the low level test sets can be generated. 

It is contemplated that the relational database used by configurator 130 to maintain 
test requirements and instructions should provide for the specification of: (1) initial values, an 
operational range, a deadband, and a physical range for each I/O component to be tested to 
allow the testing of alarms when values are within and outside of such ranges; (2) 

10 standardized questions for prompting the operator to perform various functions or to provide 
responses; (3) sets of instuctions and questions for interactive testing (or possibly atitomatic 
testing) of the HMI portion of target CS 20; (4) parameters for PID loop testing; (5) 
parameters for indicator testing; (6) general target system requirements, as well as supporting 
any other tables required for proper functioning of SlMCart 10; Figure 7 provides a screen 

15 capture image of a simulator HMI screen wherein an operator is being prompted to select a 
test section to run. Figure 8 provides a screen capture image of a simulator HMI screen 
wherein an operator is being prompted whether to run a particular test or an entire test 
procedure. Figure 9 provides a screen capture of a simulator HMI screen wherein an operator 
is being prompted to perform a test . Figure 1 0 provides a screen capture of a simulator HMI 

20 screen wherein an operator is being prompted to enter the result of the test of Figure 9. Figure 
1 1 provides a screen capture of a simulator HMI screen wherein an operator is being 
prompted to perform another test. 

Hardcopy device 1 40 is preferred to be a printer suitable for connection to HMI 130, 
and for printing hardcopy of tests, test results, and audit information as well as other reports 
25 discussed herein. 

Wiring harnesses 1 50 may take on almost any form so long as they properly transmit 
I/O signals between SIMCart 1 0 and target CS 20. However, it is preferred that wiring 
harnesses 1 50 be chosen to facilitate the coupling of target CS 20 to SIMCart 1 0 and the 
simulation of the field wiring to which target CS 20 will be coupled in its operational 
30 environment. It is contemplated that several different harnesses may be included with the 
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SIMCart 10 with each harness being designed to facilitate the coupling of SIMCart 10 to a 
particular type of target CS 20. The inclusion of such pre-configured harnesses is 
contemplated as facilitating the use of SIMCart 1 0 to test a variety of standard control 
systems such as Allen-Bradley PLC-5 controllers or Siemens S7 controllers.. 

5 Communication channel 1 60 is preferred to be a TCP/IP based Ethernet network and 

is preferred to be shared between SIMCart 10 and target CS 20 to allow flexible interaction 
between HMI 130, I/O simulator modules 120, HMI 230, PLC 270, and I/O interface 220. 
However, it is contemplated that other commimication methods such as RS-232 interfaces, 
token ring networks, FDDI networks, proprietary control busses, etc. may also be used to 
10 provide a communication channel between one or more components of SIMCart 10 and target 
CS20. 

As previously discussed, the HMI/configurator portion 1 30 of SIMCart 1 0 is useful 
both in the operation of SIMCart 10, but also as a detachable validation and/or training tool. 
It is contemplated that HMI/configurator 130 comprise the software and one or more 

1 5 databases necessary to allow it to perform its training and/or validation functions. iSuch 

functions might include, among others, the ability to control access by requiring an operator 
to log in, the abihty to simulate a particular function and to test the capabihty of the target CS 
to respond to a sensor's entire range of input, the ability to prompt the operator to perform 
operations using the target CS HMI, and automatically performing tests against target CS 

20 when such tests do no require manual operations by an operator. 

Thus, a particular configurator embodiment is likely to have the ability to store and 
run multiple tests wherein each test comprises one or more steps. In running a particular test 
or sequence of test steps, the configurator will prompt the operator to perform a function on 
the target CS whenever manual intervention by the operator is required, but will automatically 

25 (i.e. without operator action) run through any tests steps which do not require such manual 
intervention. Thus, to test a pump^ the configurator may proinpt an operator to turn on the 
pump, then, after the operator has indicated to the configurator that he has turned on the 
pump, the configurator will ask a question to verify proper operation of the pump such as 
"Did the pump indicator hght turn on?" which the operator can either respond to affirmatively 

30 or negatively. If negatively, the configurator will prompt the operator to enter a comment as 
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to what response by the target CS was actually seen. During another step, the configurator 
may generate simulated events to which the target CS has automated responses which can be 
detected by the configurator and in which case the simulator will simply simulate the events 
and monitor the target CS's response. As an example, if a power voltage level exceeds a 
5 threshold amount the target CS may be required to cut off the source of power. Such a test 
would be performed by the simulator at the appropriate point in a test sequence by sending an 
over voltage signal to the target CS and monitoring the response of target CS to see if a power 
cutoff signal is sent. Test results, whether operator responses or automatically monitored 
events/values are also stored in one or more databases so that an exceptions report comparing 
10 actual target CS responses to expected results can be generated. 

It is contemplated that the configurator will comprise a scalable library of test 
databases and test functions utilizing the test databases to perform the test steps. Utilizing 
database tables to store tests and test parameters allows a tester to add new tests and/or test 
scenarios, and also to modify parameters for existing tests. Such scalable libraries and 
1 5 dynamic updates make for a much more robust and flexible system. 

Figures 12-18 show some of the fields and data which migjit be included. The table of 
Figure 12 is an "Alarm" table and includes, possibly among others, the fields TagName, 
Initial, LL_Limit, L_Limit, H_Limit, HH_Limit, and Deadband. The table of Figure 13 is an 
"Alarm G" table and includes, possibly among others, the fields Alm ind, QNum, Type, and 

20 Question. The table of Figure 1 4 is an "Indication" table and includes, possibly among others, 
the fields ID, TagName, Description, EUZero, EUMax, and Eunit . The table of Figure 15 is 
an "PID Loop" table and includes, possibly among others, the fields PID_Number, 
Loop_Desc, Process_TagName, Min__EU, Max_EU, and EU_Name_SetPoint_TagName. The 
table of Figure 16 is an "Section IQ" table and includes, possibly among others, the fields ID, 

25 SectionNum, SectionStep, and Instruction. The table of Figure 1 7 is a "Section List" table and 
includes, possibly among others, the fields Num and Name. The table of Figure 18 is an 
"SysReqs" table and includes, possibly among others, the fields ID, Section, Requirement, 
and Question; 

SIMCart 1 0 is contemplated as being particularly well suited for a number of uses 
30 when taken to an operational facility and connected in place of all or part of the field wiring 
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including but not necessarily limited to: (1) testing existing logic for reaction to new 
scenarios; (2) testing new logic for operations; (3) training process operators prior to an 
operational campaign to a) score and validate operator readiness, b) identify deficient training 
areas, and c) ensure operational readiness as an overall team; (4) training process operators at 
5 the operational facility using by plugging SMCart 1 0 in in place of the planf s actual sensors 
and actuators; (4) field trouble shooting of wiring and other field related probliems. 

First Example Application 

An example application of SIMCart 10 is its in revalidating a PLC program used to 
manufacture a drug wherein the PLC does so by controlling ingredient weighing, heating, 

1 0 cooling, tank level control, pump control, and other portions of the manufacturing process. 
This example refers to target CS 20 as if it were the system to be re-validated. Revalidation 
of the PLC program of target CS 20 would involve first using the SIMCart 10 to perform off- 
site testing of target CS 20, and then detaching the HMI/Configurator fi-om the rest of 
SIMCart 10 and taking it on-site in the field v^th target CS 20 when target CS 20 is installed 

15 at the drug production facility. 

During off-site/lab testing, I/O simulation modules 120 are used to provide an input to 
each of the PLC I/O channels via field I/O connectors 225. The SIMCart automatic 
initialization routines create a mapping between the target PLC and SIMCart I/O channels. A 
tester would log into the SIMCart configurator computer/HMI 1 30 (requiring operators to log 

20 in facilitates future auditing). After logging in, test databases are downloaded fi-om a 
requirements database that was established for target CS 20 at the project start: The test 
databases are then used to test all functions of the PLC, HMI and network including alarms, 
loops, and field wiring to satisfy the testing requirement contained in the test databases. Such 
testing is accomplished via a series of automatic tests, as well as tests which prompt the 

25 operator to perform certain actions and to provide responses/inputs to the HMI after 
performing such actions. The testing of alarms includes the testing of deadbands, and 
appropriate low-low, low, high, and high-high alarm ranges as well as other types of data 
deltas. All data can be stored electronically with a date and time stamp as well as with other 
audit infonnation as necessary. 
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Once off-site/lab testing is complete, the SIMCat configurator/HMI 1 30 is datached 
from theSIMCart and target CS 20 and taken to the field to be used onsite to test target CS 20 
once it is installed in the drug production facility. In the field, the SIMCart configurator 
provides a field tester with a series of tests related to field I/O and wiring coimections. For 

5 some tests, the field tester is prompted by the SIMCart configurator to instruct a technician, 
possibly via cell-phone, to input signals to the system which will be passed to target CS 20 
via the field wiring; The SIMCart configurator 130 then prompts the field tester to enter 
responses answering questions related to the feedback HMI 230 of target CS 20 provided to 
the tester in response to the technician's inputs. All test questions and results are stored so as 

10 to allow a report of test results to be generated. 

Second Example Application 

Once test target CS 20 is installed in the drug production facility, SIMCart 10 can 
periodically be used to train process operators. Such training can be done on site, using the 
target CS 20 HMI by simply disconnecting target CS 20 from the plant's sensors and 

15 actuators, probably by disconnecting the field wiring, and connecting SIMCart 10 to target CS 
20 in place of the sensors and actuators. Once target CS 20 is operating with simulated VO 
rather than live sensors and actuators, operators are free to interact with target CS 20 without 
any fear of consequences to the plant. When used in such a manner, the test procedures used 
to validate target CS 20 may be used in training operators, or else SIMCart 20 may 

20 incorporate specific software and/or data for training operators. Such software and/or data 
may incorporate multi-media presentations such as training videos. SIMCart 20 may also 
work partially or completely independently of the operator so as to simulate events, track 
operator responses to the simulated events, and/or report on the quality of the operator's 
responses, without the operator having to interact with SIMCart 20 during training. 

25 Thus, specific embodiments and applications of devices and methods for plant control 

system testing have been disclosed. It should be apparent, however, to those skilled in the art 
that many more modifications besides those already described (including the methods shown 
in Figures 8-15) are possible without departing from the inventive concepts herein. The 
inventive subject matter, therefore, is not to be restricted, except in the spirit of the appended 

30 claims. Moreover, in interpreting both the specification and the claims, all terms should be 
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interpreted in the broadest possible manner consistent with the context. In particular, the 
terms "comprises" and "comprising" should be interpreted as referring to elements, 
components, or steps in a non-exclusive manner, indicating that the referenced elements, 
components, or steps may be present, or utilized, or combined with other elements, 
components, or steps that are not expressly referenced. 
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CLAIMS 

What is claimed is: 

1 . A method of testing a plant control system comprising: 

providing a control system to be tested, the control system having a controUer-I/O 
communication channel and field I/O connectors; 

providing a test system; 

coupling the test system to the control system in a manner which allows the test 
system to communicate with and drive the control system by sending and 
receiving signals via both the controUer-I/O conrmiunication channel and the field 
I/O connectors. 

2. The method of claim 1 further comprising: 
decoupling the test system from the control system; 

at least partially installing the control system in a plant to be controlled; 

utilizing at least a portion of the test system to validate the operation of the control 
system. 

37 Tfiemethod of claim 2 wherein validation of the control system involves coupling an 
I/O portion of the test system in place of at least some of the plant's sensors and 
actuators. 

4. The method of claim 2 wherein validation is accomplished by the test system utihzing 
at least a portion of the test system to validate the operation of the control system by . 
having the test system provide instructions and questions to one of more plant 
operators thereby instructing them to perform various operations and prompting them 
to enter a description as to how the control system responded to the operations, and 
recording any operator entered descriptions. 
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5. The method of claim 4 further comprising a step of causing the test system to generate 
a report indicating which operations where perfomied and what the control system 
response was for any operations performed. 

6. A method for testing a plant control system comprising: 

providing a plant control system to be tested, the control system comprising 
a controller, 
a sensor input port, 
an actuator output port, 

a series of communication segments communicatively coupling the sensor input 
port to the controller such that an input signal applied to the sensor input 
results in one or more signals traveling along each of the communication 
segments so as to notify the controller of the applied input signal, and 

a series of communication segments communicatively coupling the controller to 
the actuator output port such that a control signal generated by the controller 
results in an output signal being applied to the actuator output port; 

providing a simulator, the simulator coupled to the control system at at least three 
points, wherein a first point is the sensor input port, a second point is a point from 
which data relating to the intemal state of the controller can be obtained, and a 
third point is the actuator output port; 

causing the simulator to apply a signal to the first point and to subsequently 

obtain data on the intemal state of the controller and to monitor the actuator output 
port for any appHed signals^ 
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7. The method of claim 6 with the control system further comprising an I/O interface 
wherein coupling the simulator to the control system at the second point involves 
tying the simulator into a network used as a communication segment between the 
controller and the I/O interface. 

8. The method of claim 7 wherein the I/O interface comprises at least two analog/digital 
converters with a first, input converter converting an analog input signal applied to the 
sensor input by the simulator or sensor into a digital signal which is transmitted to the 
controller; and a second, output converter converting a digital signal received by the 
I/O interface from the controller into an analog signal which is transmitted to the 
simulator or actuator. 

9. The method of claim 8 wherein the simulator obtains data on the internal state of the 
controller by establishing a network connection with the controller and requesting that 
the controller report its internal state. 

1 0. A plant sensor and actuator simulator for use in testing a plant control system 
comprising: 

a configurator having a computer and software for entering and maintaing one or more 
databases including validation requirements and associated test procedures, each 
— — -test procedure compri sing-one or-more tests, each-test comprising at least one 

signal to be generated by the simulator and transmitted to the control system being 
tested, and at least one; 

a plurality of I/O simulator modules detachably coupled to the configurator, at least 
some of the 1/0 simulator modules comprising one or more A/D converters; 

communication chaimel connectors for communicatively coupling the configurator via 
a configurator network interface port to a network of which the controller of a 
control system to be tested is a part; 

field I/O connectors for coupling the simulator to the field I/O connectors of a control 
system to be tested. 
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1 1 . The simulator of claim 1 0 wherein the configurator databases comprise data on a 
plurality of plant sensors such that, for each control system sensor input, the 
configurator identifies the range of signals which can be produced by a sensor and 
identifies a series of signals to be used in testing the control system response to signals 
within and without entire range of signals. 

12. A method for training process operators comprising: 

providing a plant comprising a HMI to a control system coupled to plant sensors and 
actuators and controlling a process; 

disconnecting all of the sensors and actuators firom the control system; 

connecting a simulator to the control system in place of the sensors and actuators; 

causing the simulator to simulate various plant events so that the operators can 
interact with the HMI as if such events were actually occiuing. 

1 3 . The method of claim 1 2 wherein the simulator comprises a database of events and 
preferred responses, monitors operator responses to simulated events by monitoring 
the control system's internal state and/or outputs, compares the monitored response for 
a particular event to the preferred response to determine whether the operator 
succeeded or failed to provide the preferred response, and reporting on the operator's 
successes and/or failures in responding to the simulated events. 
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FIG. 3 
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Almjnd 






A1 


1,H Did the analog display symbol flash RED on screen? 




A1 


1 H_DB Is the alarm still active? 




A1 


1 H^RTN : Did the HIGH level alarm clear? 


. ^ 


D1 


1 Dig : Did the alarm activate? 


■ • ■•— • 


Dl 


1 Dig_RTN Did the alarm reset? 


■ 


A1 


1 L ' Did the analog display symbol flash RED on screen? 





A1 1 L_DB Is the alarm still active? ^ 

A1 1 L^RTN i Did the LOW leyei alVrm cleaV? ' ^ 1 \.Z 

A1 2 H 1 Did the menu button for the display screen flash? 



A1 2 L Did the menu button for the display screen flash? 

A1 3H bid the alarm" te'xt'ap^^^ 



A1 4 H Did the SCADA Alarm paging system receive the alarm? (F12 for System 



wo 00/65361 



16 11% 



PCTAJSOO/07962 



1 ri^TagName2fe.RvDescnption;t .ig 




AIT_2001_01 'Column Exit \2 




iPH i 


AIT_20G1_02 i Column Exit i 0 


1200 


!mmho 


AIT_2001_03 Column Exit '0 


■30 


!AU ! 


Aii;_zuui_U4 .uoiumn Inlet :0 


, 30 . 


Iau 


Ait_26qij)y^^ 




1 1 


'AiT_200ll66 '" 'fColumn inlet " io" 


1200 . 


immhp 


... Pt_20bl_01 " Filter Injet i 0 " 


60 


ipsig 


. . _ Pt_20dl_02 Column inlet lb" 


" ' ~60 " 


:Psig 


^lft-?°9^-03 'Cojurnn Exit ~|b 


60 


ipsig 


fT_200i_6l Feed 


:50 


ideg C 


TT_^2001_02" Column Exit ' W 




:degC 



wo 00/65361 



17 /28 



PCTAJSOO/07962 



PID_Niijmber I LopplDesc -j Prpcess^agNam^^ MimjEU.! Max£EU | EUjNamejljSetgpjintSTa^ 



1 Controls filter idP 2001 02 



!5 



iV 



iPT_2001_02 



IdPC 2C 



FIT 2001 01 



115 



iUmin 



; FIC_2001_01SP iFIC_20i 



wo 00/6S361 



18 /28 



PCT/USOO/07962 



ID SectionNum 


SectionStep ^•n^vV;^iiV :;;V^r.-v - ^^•v;^^^ -Instruction. r..:*^; ;..^vr^:^3-v- - 


- 1 


2 


20 Click on "Test" button and select tag name XV_2001_1 05_ZCO and read 




2 


21 From HMI open valve 106. 


j 
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22 Click on 'Test" button and select tag name XV_2001_106_ZCO and read 




■2 


23 From HMI close valve 106. 
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24 Click on "Test" button and select tag name XV_2001_l06_ZCO.and read 
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25 From HMI open valve 107. 




2 


26 Click on "Test" button and select tag name XV_2001_107_ZCO and read 
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27 From HMI close valve 107. 
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28 Click on "Test" iDuttbn andVelect tag name XV^2boi_l673zC^^ 
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29 From HMI open valve 108. 
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30 Click on "test" button and select tag name XV_2b6l_108_ZCO and read 


iW 
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31 From HMI close valve 108. 
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32 Click on "Test" button and select tag name XV 2001 108 ZCO and read 
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33 From HMI open valve 109. 
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34 Click on "Test" button and select tag name XV_2001_109_ZCO and read 




2' 


35 From HMI close valve 109. 
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• " 2 


36 Click on "Test" button and select tag name XV_2001_109_ZCO and read 






37 From HMI open valve 110. 




" ■ 2' 


38 Click on "Test" button and select tag name X\/_2001_110_ZCO and read 
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39 From HMI close valve 110. 
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1 Instauction 1 • ' 
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* ■ "2" 


1 From HMI open valve 101^ 


i . 
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2 Click on "Test" button and select tag name XV_2001_101_ZCO and read 


;V\. 


"2 


3 From HMI close valve 101. 
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4 Click on "Test" button and select tag name XV_2001_101_ZCO and read 


!V\, 


■ '2 


5 From HMI open valve 102. 






6 Click on "Test" button and select tag name XV_2001_102_ZCO and read 




' ■. 2 


7 From HMI close valve 102. 
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8 Click on "Test" button and select tag name XV_2001_102_ZCO and read 


iV\i 
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9 From HMI open valve 103. 
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10 Click on *Test" button and select tag name XV_2001_103_ZCO and read 




••' ~ " 2 


1 1 From HMI close valve 103- 




2 


12 Click on "Test" button and select tag name XV_2001_103_ZCO and read 
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13 From HMI open valve 104. 


i 
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""2 


14 Click on "Test" button and select tag name XV_2001_104_ZCO and read 




2. 


15 From HMI close valve 104. 


— ■■ i — 
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1 6 , Click on "Test" button and select tag name XV_2001_1 04_ZCO and read 
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17 From HMI open valve 105. 
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18 Click on "Test" button and select tag name XV_2001_105_ZCO and read 
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19, From HMI close valve 105. 




[ ■ 2 


40 Click on "Test" button and select tag name XV_2001_1 10__ZCO and read 


\\^ 
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1 Select PID test from test module menu. Run test for FQIT 2001 01. 
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2 Select Totalizer test from test module menu. Run test for FQIT 2001 01 . 


\\^ 
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3 Select Indication test from test module menu. Run test for FQIT 2001 01 . 




3" 


4 Select Indication test from test module menu. Run test forTT 2001 01. 




"'*'" ' " 3' 


5 Select Indication test from test module menu. Run test for PT 2001 01. 
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901 

providing a control system to be tested, the control system having a controUer- 
I/O communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a manner which allows the 
test system to communicate with and drive the control system by sending and 
receiving signals via both the controller-I/O communication channel and the 

field I/O connectors 

^ Fig. 19 ~ 
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901 

providing a control system to be tested, the control system having a controller- 
I/O communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a maimer which 
allows the test system to communicate with and drive the control system by 
sending and receiving signals via both the controUer-I/O communication 
channel and the field I/O connectors 



904 

decoupling the test system fi-om the control system 

9^^ 

installing the control system in a plant to be controlled 



906 

utilizing at least a portion of the test system to validate the operation of the 

control system 



Fig, 20 
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901 

providing a control system to be tested, the control system having a controller- 
I/O communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a maimer which 
allows the test system to communicate with and drive the control system by 
sending and receiving signals via both the controUer-I/O communication 
channel and the field I/O connectors 



904 

decoupling the test system from the control system 



905 

installing the control system in a plant to be controlled 



906b 

utilizing at least a portion of the test system to validate the operation of the 
control system by coupling an I/O portion of the test system in place of at least 
some of the plant's sensors and actuators 

Fig. 21 ~ " 
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901 

providing a control system to be tested, the control system having a controller-I/O 
communication channel and field I/O connectors 



902 

providing a test system 



903 

coupling the test system to the control system in a manner which allows the test 
system to communicate with and drive the control system by sending and receiving 
signals via both the controUer-I/O communication channel and the field I/O connectors 



904 

decoupling the test system from the control system 



905 

installing the control system in a plant to be controlled 

mi 

utilizing at least a portion of the test system to validate the operation of the control 
system by having the test system provide instructions and questions to one or more plant 
operators thereby instructing them to perform various operations and prompting them to 
enter a description as to how the control system responded to the operations, and 
recording any operator entered descriptions to any questions asked 

causing the test system to generate a report indicating which operations where 
performed, and what the control system response was for any operations performed 



Fig. 22 
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911 

providing a plant control system to be tested, the control system comprising a controller, 
an I/O interface, a sensor input port, an actuator output port, a series of communication 
segments communicatively coupling the sensor input port to the controller such that an 
input signal applied to the sensor input results in one or more signals traveling along 
each of the communication segments so as to notify the controller of the applied input 
signal, and a series of communication segments communicatively coupling the 
controller to the actuator output port such that a control signal generated by the 
controller results in an output signal being applied to the actuator output port 

_ 

providing a simulator, the simulator coupled to the control system at at least three 
points, wherein a first point is the sensor input port, a second point is a controUer-I/O 
interface network access point from which data relating to the intemal state of the 
controller can be obtained, and a third point is the actuator output port 

— — - - 913 ~~ . 

causing the simulator to apply a signal to the first point and to subsequently 
obtain data on the intemal state of the controller and to monitor the actuator 

^ output port for any applied signals 

Fig. 23 ^ 
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921 

providing a plant control system to be tested, the control system comprising a 
controller, a sensor, an actuator, and an I/O interface having a sensor input port and an 
actuator output port wherein the I/O interface and controller are networked together, the 
sensor is electrically coupled to the sensor input port, and the actuator is electrically 

coupled to the actuator output port 



922 

disconnecting the sensor and actuator from the sensor input port and actuator 

output port 



923 

providing a simulator 



924 

networking the simulator with the controller and the I/O interface and coupling the 
simulator to the sensor input port and the actuator output port 



925 

causing the simulator to transmit a signal to the controller via the sensor input port while 
monitoring signals transmitted by the controller to the actuator port 



926 

determining any changes in state in the controller caused by the transmitted signal 



Fig. 24 
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931 

providing a control system to be tested 



932 

providing simulated sensor inputs to the control system 



933 

monitoring the control systems response to the simulated sensor inputs by both 
monitoring the control system's actuator outputs and querying the controller for 

information on its internal state 



Fig. 25 
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941 

providing a plant control system to be tested, the control system comprising a controller, 
an input/output (I/O) interface in communication with the controller via a first communications 
channel, the I/O interface comprising a plurality of field I/O connectors; a plurality of sensors, and 
a plurality of actuators, wherein the plurality of sensors and the plurality of actuators are coupled 
to the field lO connectors via field wiring harnesses, and wherein the controller transmits signals 
to the a:ctuators by transmitting a signal via the first communication channel to the I/O interface 

and the I/O interface transmitting a corresponding signal to the actuators via the field wiring 
harnesses, and the sensors send signals to the controller by sending a signal via the field wiring 
harnesses to the I/O interface and the I/O interface sending a corresponding signal to the controller 
via the first communication channel 

■ . ~- [ ' 942 ~~ ~~ 
providing a simulator capable of duplicating the signals sent by the sensors to the controller and 
capable of receiving the signals sent by the controller to the actuators 

" " '. ~. 943 ~ ~^ 

disconnecting at least some of the plurality of actuators and/or at least some of the 

plurality of sensors from the I/O interface ' . 

— — — — - ■ ^ ■ 

coupling die simulator to the I/O interface in place of at least some of the disconnected 
' • ■ " actuators and/or sensors ■ 

~ 945 ~ " 

causing the simulator to sending signals to the controller via the I/O interface wherein the 
sent signals have similar characteristics to signals which the disconnected sensors could send 

~ . . 946 ~ 

causing the simulator to receive signals from the controller via the I/O interface wherein the 
received signals have similar characteristics to signals which would be received by the 
. disconnected actuators • • 

• ~ '' 947 ■ 
■ monitoring the signals received by the simulator from the controller via the I/O interface 

comparing the received signals to an expected value stored in a requirements database 
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